Information Security Manager (GRC Engineering) (m/f/d)

Stack

Responsibilities

• ▹Build automated evidence pipelines against AWS, IAM, and the security stack (Wiz, Vanta, SentinelOne, Datadog)
• ▹Integrate compliance checks into CI/CD so drift is caught before an auditor does
• ▹Extend the Vanta compliance automation platform with custom integrations
• ▹Own the security & compliance program (ISO 27001, SOC 2 Type 2, PCI DSS v4.0.1, HIPAA): audits, scoping, control testing, QSA/auditor relationships, risk register
• ▹Turn regulatory requirements into engineering-consumable specs and tickets
• ▹Run vendor/third-party risk under DORA and support incident response from the compliance side

Requirements

• ▹3+ years in security compliance, with real ownership of at least one full SOC 2 or PCI DSS audit cycle
• ▹Experience working with tech and engineering teams
• ▹Working knowledge of at least two of: SOC 2, PCI DSS, HIPAA, DORA
• ▹Experience managing external auditors/QSAs through to a delivered report
• ▹Excellent written communication for engineers, auditors, and executives
• ▹Comfortable owning ambiguity with a small team behind you

Nice to have

• ▹Experience at a regulated fintech, EMI, PSP, or bank
• ▹CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer
• ▹Experience with LLM-based tooling for security/compliance workflows

Soft skills

What we offer

• ▹A growing team with big responsibilities and a strong knowledge-sharing culture
• ▹Attractive remuneration
• ▹Choice of preferred OS, Windows or Mac
• ▹Flat hierarchy and transparent communication
• ▹Opportunity to develop your talent in an ambitious team
• ▹Flexibility and possibility to work remotely
• ▹Company card with a monthly allowance for lunches and coffee with co-workers

About the company

Pliant is a European fintech founded in 2020 and headquartered in Berlin, specializing in B2B payment solutions. Its API-first platform serves over 4,000 businesses, and as a licensed e-money institution it issues credit cards in 11 currencies across more than 30 countries.